Copilot's app and CLI now obey content exclusions, and an admin can set the default model
GitHub shipped two Copilot changes on September 2, 2026. The Copilot app and Copilot CLI now respect the content exclusion rules that enterprise, organization and repository administrators configure, on Copilot Business and Copilot Enterprise. Enterprise-managed settings now accept the name of a specific model as the default for new conversations. The documentation also spells out the limits: an excluded file can still reach the model through type information the editor supplies, and the rule covers neither symbolic links nor repositories on remote filesystems.
Source
Content exclusions generally available in Copilot app and CLIGitHub Changelog: Copilot · Original published September 2, 2026
If your employer keeps certain files away from Copilot, that rule now follows you into the Copilot app and the Copilot CLI. GitHub made content exclusions generally available in both clients on September 2, 2026, for Copilot Business and Copilot Enterprise. The same day brought a second change: an administrator can name the model that new conversations start with.
What an exclusion actually stops
An exclusion is a list of paths written in fnmatch pattern notation, set by a repository administrator, an organization owner or an enterprise owner. GitHub's documentation lists four consequences for a file that matches a pattern.
A new rule does not apply the moment it is saved. The documentation says it can take up to 30 minutes for changes to take effect in environments where the settings are already loaded, so a rule written at the start of a meeting may not be in force by the end of it.
- Inline suggestions are not available in the affected files.
- The content of those files does not inform inline suggestions in other files.
- The content does not inform Copilot's responses in chat.
- The files are not reviewed in a Copilot code review.
Where the rule does not reach
An exclusion does not mean the model learns nothing about the file. The documentation says Copilot may use semantic information from an excluded file when the editor passes it along indirectly, and it names type information, hover-over definitions for symbols and general project properties as examples.
The second limit is easier to miss. Content exclusions do not apply to symbolic links or to repositories on remote filesystems. Anyone treating the feature as a guard on credentials or customer data should check how those files are reachable on the machine before relying on it.
The default model becomes an administrator's decision
The second change concerns model choice. In enterprise-managed settings the model key now takes the name of a specific model and version, and the documentation uses kimi-k-3 as its example. The change is generally available on Copilot Business and Copilot Enterprise, in the Copilot app, in Copilot CLI and in Visual Studio Code.
The setting governs only where a conversation starts. A user can still pick a different model inside a single conversation. An administrator who wants separate defaults per team marks the key overridable and maps teams through team-mappings.json, and a team that wants no imposed choice writes unmanaged in its own settings file.
Support is not uniform across clients. The documentation lists the model key as supported in Copilot CLI, Visual Studio Code and the GitHub Copilot app, and as unsupported in JetBrains IDEs and in the Copilot cloud agent.
„Copilot may use semantic information from an excluded file“
Sources
Related
OpenClaw 2026.10.2 stops long tool output from slipping credentials past redaction
A bug in OpenClaw's secret masking let a credential through whenever it straddled the boundary between two slices of a long text. The fix ships in 2026.10.2 along with repaired updates from 2026.10.1 and a new compaction default for OpenAI and Anthropic API keys.
OpenClawverified

OpenClaw 2026.10.1 lets agents search installed skills and changes how sessions message each other
OpenClaw released version 2026.10.1 on October 10, 2026, its first stable release since 2026.9.7. Agents can now search the skills installed on a machine and read only the one a task needs, instead of carrying the whole library in the prompt. Opt-in MCP Apps run beside chat, and full backups can go to an external drive or Cloudflare R2. Three changes can break existing setups: session-to-session messaging, the old required argument, and Workboard data stored before July 2026.
OpenClawverified
Claude Code 2.1.294 fixes prompt hooks that let through the actions they were written to block
Anthropic released Claude Code 2.1.294 on October 8, 2026. It fixes prompt and agent hooks phrased as instructions, which could allow exactly the actions they were meant to stop. Version 2.1.295 followed the same day with an onFailure setting that makes a crashed or timed-out command or HTTP hook block the action. Releases 2.1.292 and 2.1.293 from earlier in the week closed several permission and sandbox gaps.
Claude Code Releases (GitHub)verified
